Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/17b38195-9977-3f31-9006-effbb3d82155.roa
File:                     17b38195-9977-3f31-9006-effbb3d82155.roa (raw, json)
Hash identifier:          /DZYa0MQlXwSfkgEP+zZVi4vKM6pH7E+n0YW7tbuvXo=
Subject key identifier:   0F:71:CE:64:AC:A2:B7:93:68:C0:36:39:76:96:F1:47:52:C3:0B:F4
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584774FBAA3C2DA1551E61FC8D00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/17b38195-9977-3f31-9006-effbb3d82155.roa
Signing time:             Mon 07 Oct 2024 01:00:31 +0000
ROA not before:           Mon 07 Oct 2024 01:00:31 +0000
ROA not after:            Sun 05 Jan 2025 02:00:31 +0000
asID:                     399976
IP address blocks:        2602:80c:205f::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:74:fb:aa:3c:2d:a1:55:1e:61:fc:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Oct  7 01:00:31 2024 GMT
            Not After : Jan  5 02:00:31 2025 GMT
        Subject: CN=331e2f76-d97d-4100-8924-ce467a8598b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:24:65:86:6a:42:c8:1f:50:99:83:33:43:
                    e8:c9:19:46:e6:eb:a4:0c:59:26:7d:f5:69:4b:b7:
                    f5:89:c6:7a:6f:72:f0:ed:34:1c:f9:73:64:4d:dc:
                    6e:d7:20:77:cc:c4:49:fc:e9:d6:5a:32:03:ac:f7:
                    93:f0:f6:16:ba:e8:b9:d9:03:9a:6a:60:4d:e4:c7:
                    f0:56:de:4f:19:f7:f0:db:92:d6:d6:6d:9a:2e:74:
                    9f:de:a0:d3:40:3b:0f:4e:75:66:7a:c3:3b:96:6f:
                    24:98:b0:7a:27:c8:0d:87:0b:31:91:9f:78:28:4a:
                    f4:d7:d3:69:3e:de:ce:7e:b4:c9:cc:2b:00:fe:09:
                    6e:88:1b:f7:2b:89:3b:f4:0d:e6:c8:f7:a2:1f:dc:
                    0b:97:f3:16:3a:ba:8c:64:39:15:8b:42:12:14:4c:
                    96:71:6e:86:9d:b8:e8:ab:89:10:35:19:8c:b8:46:
                    38:9d:60:a0:9f:d1:5c:c8:d2:30:79:27:92:78:5a:
                    ea:bb:95:a3:0f:b6:04:0f:cb:d0:4b:dd:6f:27:56:
                    d8:fe:bd:10:c9:10:e6:07:93:e2:77:a1:4b:12:c5:
                    e1:55:cd:96:74:32:73:d4:33:da:02:dd:d8:2a:3e:
                    38:22:36:11:69:3c:50:5e:07:af:44:f2:10:be:53:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:CE:64:AC:A2:B7:93:68:C0:36:39:76:96:F1:47:52:C3:0B:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/17b38195-9977-3f31-9006-effbb3d82155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:205f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:84:a0:58:d1:4d:97:dd:c9:0b:95:05:8a:d2:68:86:9c:8b:
         ac:80:5c:f2:72:b7:ef:6d:31:cc:e1:03:80:b9:14:eb:24:b6:
         af:80:7e:11:7c:80:dc:28:b2:b4:b0:5a:7d:9d:39:90:17:6b:
         08:c4:d9:44:88:83:8b:e1:59:f3:60:2f:aa:2d:e6:58:ad:c9:
         cd:40:6d:77:df:d7:31:22:b4:20:b9:5c:b6:dc:8d:ab:00:d9:
         16:ad:82:4e:86:3b:ed:c6:6f:53:c5:cc:01:cf:1f:d9:c2:ff:
         35:89:ec:d3:51:cc:16:0e:71:ef:fc:ee:36:a1:8e:01:97:e3:
         3e:98:d4:4a:97:2b:b4:e5:d0:b5:b5:3a:4d:ab:16:63:1f:51:
         3d:56:1c:56:7b:57:90:f9:14:96:76:ba:38:68:7b:e9:7c:2f:
         4e:49:8d:46:aa:bf:d4:c6:34:66:13:2e:4e:44:e2:3f:d7:93:
         1b:4e:a7:a6:96:fd:e4:c8:11:cf:8f:13:77:da:62:6c:4f:dc:
         cf:1e:7b:e5:e4:be:ef:43:3f:60:3d:e4:03:7e:c1:bf:20:f6:
         54:51:e1:c8:88:06:19:30:1d:f6:f2:de:5b:db:b3:57:d7:a9:
         83:6a:ff:90:0c:06:ee:90:55:6c:7a:13:f1:12:fa:a1:b9:c5:
         af:3f:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:30:19 2024 by rpki-client on console-fra.rpki-client.org